$ rpki-client -vvf rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft File: zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft (raw, json) Hash identifier: 4okRbG56yXtiUXU6xDO9anv3sjB/8RzRYMhyKil0kKc= Subject key identifier: AC:D0:92:3C:02:7B:72:0B:F0:41:95:39:F9:04:11:0A:88:D2:8F:09 Authority key identifier: CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 Certificate issuer: /CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft Manifest number: 01EC Signing time: Sun 15 Jun 2025 01:51:47 +0000 Manifest this update: Sun 15 Jun 2025 01:51:47 +0000 Manifest next update: Sun 22 Jun 2025 01:51:47 +0000 Files and hashes: 1: zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl (hash: A91M+MRScknT5i+IgyjpkmooZVhdutAL3RXCKfJa68E=) 2: 0E4247485B5811ED91760C7DC4F9AE02.roa (hash: qbxShxJ7AuiZAM9HFVwuKcG851IE5SsittqszSxEAtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91540B9, serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Validity Not Before: Jun 15 01:51:47 2025 GMT Not After : Jun 22 01:51:47 2025 GMT Subject: CN=684e2733-27e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:25:af:f8:f4:bd:29:8c:8c:e6:79:c7:41: 8f:ad:20:03:9a:cc:a9:c7:3f:98:9d:f9:64:03:59: e8:fc:3d:fa:12:08:53:b5:1c:da:d0:3e:e0:08:e6: ba:86:41:d9:40:17:ed:4b:7a:65:c0:57:74:f3:1b: 12:ba:5f:ef:53:0b:bc:0a:80:ab:69:3e:20:0f:7b: 1f:49:46:2f:ef:f0:21:cd:33:46:80:56:66:83:b7: 77:32:85:bf:06:7e:e4:4d:1f:05:fe:b2:33:a7:70: ee:e2:32:a3:70:4f:07:b0:fe:72:93:5f:cc:1e:f3: d0:5b:ed:b5:37:c9:61:ce:a2:cb:13:f4:1a:d6:7d: ea:86:d6:ce:f5:83:67:47:98:09:8d:6e:5c:d0:e1: 84:02:eb:4a:7f:9b:11:9d:92:c0:e8:cd:b9:98:72: 48:35:be:8a:30:a4:17:88:c2:d5:b9:20:60:3d:0d: 74:89:11:26:eb:ab:53:da:8e:f9:8c:0e:48:4c:66: e3:b2:3c:a8:86:d3:e0:98:fc:8a:c4:e0:2d:16:f0: b0:0f:0d:a9:2f:87:97:cd:b0:0c:e4:00:f5:52:df: 18:99:e3:26:d6:84:15:7a:ba:7a:43:2e:45:32:ab: 22:12:3f:cd:b6:63:76:89:8c:39:fc:1b:b4:ca:04: a7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D0:92:3C:02:7B:72:0B:F0:41:95:39:F9:04:11:0A:88:D2:8F:09 X509v3 Authority Key Identifier: keyid:CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d2:5d:a2:63:da:55:e1:81:6c:c1:4d:56:81:9d:0d:f9:ed: da:dd:90:a9:4a:01:76:9e:35:2e:db:81:40:f0:60:35:48:3d: f7:06:24:d3:af:a1:03:18:1e:32:99:13:5b:56:73:74:cc:a7: 5c:a5:41:08:88:65:68:7f:5f:7a:75:3e:ca:fc:27:f0:9c:b2: 4a:0d:06:40:f9:5e:df:e3:e0:fc:22:22:b0:4d:16:7a:14:c7: c4:5d:1d:5c:66:84:8c:8a:78:93:b5:82:54:38:9b:14:91:2a: 93:93:e9:9b:83:3b:78:ee:fa:71:77:35:4b:00:af:59:af:58: 06:bd:bb:d3:0d:3a:35:ce:f5:87:75:36:54:1b:97:7f:8b:8e: bb:b3:1f:12:26:02:cc:4a:fe:52:f7:ed:06:2c:9f:3d:f8:54: d6:fb:0e:73:ec:0d:c1:c7:2f:b9:b2:27:2b:18:a6:1b:81:ed: 7b:2b:72:68:2c:64:2e:5d:73:2f:ae:56:52:ac:7f:ce:15:2b: 29:22:ac:bf:11:4e:d9:8f:a4:e4:53:ea:83:ea:59:aa:71:6e: 18:25:69:7f:55:d7:e3:68:b5:79:aa:f2:89:74:a2:03:e9:75: 26:6e:40:f7:da:87:de:5a:b5:b4:83:65:3c:d6:cc:ec:4f:df: bd:61:ae:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwQjkxMTAvBgNVBAUTKENDRTA4MzQ3OUM0NjcyREY5OTI4QkFBODM4RjJBQjI4 MDI2REVGRjcwHhcNMjUwNjE1MDE1MTQ3WhcNMjUwNjIyMDE1MTQ3WjAYMRYwFAYD VQQDEw02ODRlMjczMy0yN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0klr/j0vSmMjOZ5x0GPrSADmsypxz+YnflkA1no/D36EghTtRza0D7gCOa6 hkHZQBftS3plwFd08xsSul/vUwu8CoCraT4gD3sfSUYv7/AhzTNGgFZmg7d3MoW/ Bn7kTR8F/rIzp3Du4jKjcE8HsP5yk1/MHvPQW+21N8lhzqLLE/Qa1n3qhtbO9YNn R5gJjW5c0OGEAutKf5sRnZLA6M25mHJINb6KMKQXiMLVuSBgPQ10iREm66tT2o75 jA5ITGbjsjyohtPgmPyKxOAtFvCwDw2pL4eXzbAM5AD1Ut8YmeMm1oQVerp6Qy5F MqsiEj/NtmN2iYw5/Bu0ygSnkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzQkjwC e3IL8EGVOfkEEQqI0o8JMB8GA1UdIwQYMBaAFMzgg0ecRnLfmSi6qDjyqygCbe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDBCOS9ENUMyNTFDODVC NTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0LVpLTHFvT1BLcktBSnQ3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPQ0RSNXhHY3QtWktMcW9PUEtyS0FKdDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDBCOS9ENUMyNTFDODVCNTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0 LVpLTHFvT1BLcktBSnQ3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC0l2iY9pV4YFswU1WgZ0N+e3a3ZCpSgF2njUu24FA8GA1SD33BiTT r6EDGB4ymRNbVnN0zKdcpUEIiGVof196dT7K/CfwnLJKDQZA+V7f4+D8IiKwTRZ6 FMfEXR1cZoSMiniTtYJUOJsUkSqTk+mbgzt47vpxdzVLAK9Zr1gGvbvTDTo1zvWH dTZUG5d/i467sx8SJgLMSv5S9+0GLJ89+FTW+w5z7A3Bxy+5sicrGKYbge17K3Jo LGQuXXMvrlZSrH/OFSspIqy/EU7Zj6TkU+qD6lmqcW4YJWl/VdfjaLV5qvKJdKID 6XUmbkD32ofeWrW0g2U81szsT9+9Ya6F -----END CERTIFICATE-----Generated at Sun Jun 15 08:09:19 2025 by rpki-client